diff options
| -rw-r--r-- | docs/sections/release-notes.rst | 25 |
1 files changed, 12 insertions, 13 deletions
diff --git a/docs/sections/release-notes.rst b/docs/sections/release-notes.rst index 372e8bb6..74a6a94c 100644 --- a/docs/sections/release-notes.rst +++ b/docs/sections/release-notes.rst @@ -26,9 +26,9 @@ All components interfacing with platform components were modified to support TLS **Miscellaneous** - DCAE Dashboard deployment migration from cloudify blueprint to OOM/Chart - Dynamic Topic support via Dmaap plugin integration for DataFileCollector MS - - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service + - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service - CBS client libraries updated to remove consul service lookup - - Image Optimization (ConfigBindingService, InventoryAPI, ServiceChangeHandler, HV-VES, PRH, Son-handler) + - Image Optimization (ConfigBindingService, InventoryAPI, ServiceChangeHandler, HV-VES, PRH, Son-handler) @@ -69,8 +69,8 @@ DCAE also includes below MS which can be deployed on-demand (via Dashboard or Cl - BBS Event processor - Analytics/RCA - SON-Handler - - Missing Heartbeat Ms - + - Missing Heartbeat Ms + - All DCAE components are designed to support platform maturity requirements. @@ -110,19 +110,18 @@ Source code of DCAE components are released under the following repositories on **Known Issues** - * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) - + * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) + **Security Notes** *Fixed Security Issues* + * Unsecured Swagger UI Interface in xdcae-datafile-collector. [`OJSI-28 <https://jira.onap.org/browse/OJSI-28>`_] * In default deployment DCAEGEN2 (xdcae-datafile-collector) exposes HTTP port 30223 outside of cluster. [`OJSI-109 <https://jira.onap.org/browse/OJSI-109>`_] * In default deployment DCAEGEN2 (xdcae-tca-analytics) exposes HTTP port 32010 outside of cluster. [`OJSI-161 <https://jira.onap.org/browse/OJSI-161>`_] * In default deployment DCAEGEN2 (dcae-datafile-collector) exposes HTTP port 30262 outside of cluster. [`OJSI-131 <https://jira.onap.org/browse/OJSI-131>`_] * CVE-2019-12126 - DCAE TCA exposes unprotected APIs/UIs on port 32010. [`OJSI-201 <https://jira.onap.org/browse/OJSI-201>`_] *Known Security Issues* - - * Unsecured Swagger UI Interface in xdcae-datafile-collector. [`OJSI-28 <https://jira.onap.org/browse/OJSI-28>`_] * Unsecured Swagger UI Interface in xdcae-ves-collector. [`OJSI-30 <https://jira.onap.org/browse/OJSI-30>`_] * In default deployment DCAEGEN2 (xdcae-ves-collector) exposes HTTP port 30235 outside of cluster. [`OJSI-116 <https://jira.onap.org/browse/OJSI-116>`_] * In default deployment DCAEGEN2 (xdcae-dashboard) exposes HTTP port 30418 outside of cluster. [`OJSI-159 <https://jira.onap.org/browse/OJSI-159>`_] @@ -189,7 +188,7 @@ All components interfacing with platform components were modified to support TLS **Miscellaneous** - DCAE Dashboard deployment migration from cloudify blueprint to OOM/Chart - Dynamic Topic support via Dmaap plugin integration for DataFileCollector MS - - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service + - Dynamic Topic support via Dmaap plugin integration for PM-Mapper service - CBS client libraries updated to remove consul service lookup @@ -200,8 +199,8 @@ All components interfacing with platform components were modified to support TLS **Known Issues** - * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) - + * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) + **Security Notes** @@ -357,8 +356,8 @@ Source code of DCAE components are released under the following repositories on **Bug Fixes** **Known Issues** - * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) - + * Healthcheck/Readiness probe VES Collector when authentication is enabled (DCAEGEN2-1594) + **Security Notes** |